Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm wondering if I got hacked. I noticed my C:\ was shared, wtf. Maybe it has to do with how MacFUSE connects to my Windows partition in Mac OS X.

share|improve this question
    
What's it shared as? It's not the default C$ share, is it? –  Kasius Oct 2 '12 at 19:35
add comment

2 Answers

up vote 3 down vote accepted

Larry Osterman from Microsoft answers this question here:

http://blogs.msdn.com/b/larryosterman/archive/2005/05/26/422188.aspx

Out-of-the box, a Windows system automatically shares the root of every hard drive on the machine as $ (so you get C$, D$, A$, etc).

...

the development lead for Lan Manager (Russ (Ralph) Ryan) needed to change a config file on the LanMan server that hosted the source code for the Lan Manager product. And he realized that none of the file shares on the machine allowed access to the root directory of the server! He couldn't add a new share remotely, because the UI for adding file shares required that you navigate through a tree view of the disk - and since the root wasn't shared, he could only add shares that lived under the directories that were already shared.

...

Nowadays, with RDP and other more enhanced remote administration tools, it's less critical, but there are a boatload of products that rely on the feature.

share|improve this answer
    
Wait, so if Microsoft simply produced a command line share-editing tool, this wouldn't be a problem? I don't have any lemons for sale, would you to try our hammers for $4.99 a piece? –  mcandre Oct 2 '12 at 20:41
    
If Microsoft had produced a command line share-editing tool, that tool would need some way to create shares, like for example admin shares. –  Andrew J. Brehm Oct 2 '12 at 20:47
    
@AndrewJBrehm, I don't understand why the root drives would have to be shared by default in order to use/add them later. Why not have the share editor allow you to specify a plain Windows path on your local computer (or the one you're connecting to remotely)? –  mcandre Oct 2 '12 at 20:49
1  
I assume that without the root shares it would be difficult to verify if you had permission to share whatever path you enter. –  Andrew J. Brehm Oct 2 '12 at 21:17
    
Whoever has permission to modify the share settings would have sufficient rights to the partitions on the machine. –  mcandre Oct 2 '12 at 23:51
show 1 more comment

By default C:\ is shared as a "hidden", admin-only share called C$. Only admins can access the share and the permissions cannot be changed. If it was shared as some other name, it would indicate either you, another admin or program running as admin added the share.

To minimize the possibility of the latter happening in the future, do not login regularly as an admin (assuming you do so now - if not, congrats!).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.